Approved changes feed: RSS · Atom

cpe:2.3:a:unbound:unbound:1.4.9:*:*:*:*:*:*:*

part: a version: 1.4.9 update: *

VendorUnbound (eaac773e-3e32-59f5-8b74-cf6e477714f7)
ProductUnbound (18971392-3c63-5c00-bb06-74c0a6cc39a1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1192 vulnerable 2026-06-08 05:00:48.212869 Details available
The resolver in Unbound before 1.4.11 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
Published: 2012-02-17T22:00:00.000Z
Updated: 2024-09-16T18:08:20.003Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4869 vulnerable 2026-06-08 04:59:33.392554 Details available
validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.
Published: 2011-12-20T11:00:00.000Z
Updated: 2024-08-07T00:16:34.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4528 vulnerable 2026-06-08 04:59:31.740359 Details available
Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service (daemon crash) via a crafted response.
Published: 2011-12-20T11:00:00.000Z
Updated: 2024-08-07T00:09:18.826Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.